Video Distribution Suite For Internet Streaming

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2017-9805 Sep 15, 19:29 Maven HIGH POC KEV PATCH THREAT Act Now

The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Apache Deserialization Cisco Struts +7

NVD Exploit-DB

CVSS 3.1

8.1

EPSS

94.3%

Threat

7.4

CVE-2017-9805 Maven

EPSS 94% 7.4 CVSS 8.1

HIGH POC KEV PATCH THREAT Act Now

The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Actively exploited in the wild (cisa kev) and public exploit code available.

RCE Apache Deserialization +9

NVD Exploit-DB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy